2 matches found
CVE-2020-29284: Improper Neutralization of Special Elements used in an SQL Command
The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the tableid parameter which allows unauthenticated SQL Injection. An attacker can send malicious input in the GET request to /dashboard/view-chair-list.php?tableid= to trigger the...
9.8CVSS8.2AI score0.06093EPSS
SaveExploits1References2
PT-2020-17133
Name of the Vulnerable Software and Affected Versions Multi Restaurant Table Reservation System version 1.0 Description The issue arises from the lack of input validation on the table id parameter in the file view-chair-list.php, allowing unauthenticated SQL Injection. An attacker can exploit thi...
9.8CVSS0.06093EPSS
SaveExploits1References7
20